Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-07 | 1 | Exploit1 |
| 2026-03-08 | 1 | Disclosure1 |
| 2026-03-12 | 1 | Disclosure1 |
[CVE-2026-3677: HIGH] Critical vulnerability in Tenda FH451 1.0.0.9 discovered! Exploit for remote stack-based buffer overflow now public. Stay vigilant and update your systems.#cve,CVE-2026-3677,#cybersecurity https://cvefind.com/CVE-2026-3677
Post summary
The tweet announces that CVE-2026-3677, a remote stack-based buffer overflow in Tenda FH451 firmware, now has a publicly available exploit and urges users to update their systems.
CVE-2026-3677 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The m..https://nvd.nist.gov/vuln/detail/CVE-2026-3677 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A new CVE‑2026‑3677 affecting Tenda FH451 routers has been identified with a CVSS score of 7.4; the text provides basic details and a link to NVD, but lacks a PoC, exploit code, or patch information.
CVE-2026-3677 A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 r… https://www.cve.org/CVERecord?id=CVE-2026-3677
Post summary
The text announces a new vulnerability (CVE-2026-3677) in Tenda FH451 1.0.0.9, detailing impacted function and argument manipulation, but does not mention PoC, exploit, patch, or active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | fh451 | - | - | - |
| OS | tenda | fh451_firmware | 1.0.0.9 | - | - |